Home Malware Programs Browser Hijackers Spyware.Known_Bad_Sites

Spyware.Known_Bad_Sites

Posted: December 31, 2009

Spyware.Known_Bad_Sites is a browser hijacker which redirects victims to Adware, Spyware and Phishing sites. Spyware.Known_Bad_Sites may use the Windows hosts file to redirect your browser to a malicious site when you try to access a valid site such as your Bank. Spyware.Known_Bad_Sites also contains spyware which monitors all user activities online. Spyware.Known_Bad_Sites poses a severe threat to PC security and should be removed immediately once detected.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\kqermpuovi.dll
    2 %System%\tjhnrruleb.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\AppDataLow\Software\{3A58855D-8887-2C71-4292-F91334DBC2DB}][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\AvailableVersion][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\DownloadInformation][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}tjhnrruleb]
Loading...